Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
File:                     fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json)
Hash identifier:          WfxTQwiwwK/86ZmvNvNg0GCKzvhlBRYuaofCYV+r5qw=
Subject key identifier:   BB:7F:DD:35:ED:04:FF:00:53:F0:F6:D8:58:8A:88:88:4C:8C:E0:2A
Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8
Certificate issuer:       /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
Certificate serial:       34BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
Manifest number:          9ACB
Signing time:             Thu 18 Sep 2025 15:19:53 +0000
Manifest this update:     Thu 18 Sep 2025 15:19:53 +0000
Manifest next update:     Thu 25 Sep 2025 15:19:53 +0000
Files and hashes:         1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: mA0hPbIFnOcqEhJ/LS0m16YFt3NMfVOKkhyC0LXnaNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 15:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13498 (0x34ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
        Validity
            Not Before: Sep 18 15:19:53 2025 GMT
            Not After : Sep 25 15:19:53 2025 GMT
        Subject: CN=68cc2319-3b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:82:c6:8b:5f:e8:18:fb:bc:af:f4:51:cd:
                    99:85:39:d7:47:09:53:e8:36:de:39:68:34:c5:a2:
                    13:a1:b2:43:4f:3c:3a:bb:cd:d8:fa:65:a0:9f:fa:
                    c6:1e:4f:aa:58:eb:95:f3:61:58:d5:63:98:b5:4b:
                    8b:2a:d2:2f:69:d5:c7:ba:e3:96:48:0b:94:80:bc:
                    cc:c2:fb:9b:33:67:2f:1b:98:b6:98:1a:87:66:56:
                    88:9f:07:62:29:78:cc:3f:05:53:cd:d5:5c:4d:48:
                    dc:f7:f7:27:66:74:01:55:54:bc:65:7c:ef:b0:1a:
                    41:78:79:3e:9f:3f:8a:59:84:a9:6a:2f:c7:46:38:
                    f9:72:44:d9:f6:de:ea:f4:96:da:20:68:1e:bc:f5:
                    5c:d5:d9:24:15:ca:f7:48:10:84:87:65:3b:49:2a:
                    76:51:dd:4b:6d:f8:22:f3:7f:0c:11:63:fd:74:c0:
                    b6:f1:ab:95:56:e3:b1:99:c4:80:0e:90:91:70:47:
                    ad:cd:df:84:7b:dd:a8:d7:08:91:17:c9:06:96:15:
                    cb:20:00:df:84:c6:a6:8f:14:b8:31:61:2c:fa:32:
                    a4:82:36:ea:fe:33:5c:77:fe:c7:2b:af:85:75:24:
                    0a:12:13:7d:be:5c:49:88:e3:3b:fb:1d:21:ae:b1:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7F:DD:35:ED:04:FF:00:53:F0:F6:D8:58:8A:88:88:4C:8C:E0:2A
            X509v3 Authority Key Identifier:
                keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:1e:ce:b4:8f:f9:1f:6e:a5:31:39:d5:5e:a5:48:d1:cc:
         2f:20:64:0f:de:98:97:16:d2:f8:f3:08:9f:ce:dd:71:2a:23:
         36:a6:dc:61:07:07:b7:b3:5a:b4:d8:43:5c:d5:47:b7:c2:2c:
         0a:69:16:f0:e3:0c:c2:d2:f9:df:ba:c0:eb:62:f5:57:28:15:
         ef:2d:50:2b:9e:2d:a4:05:00:44:4a:99:90:b1:ea:3d:1a:15:
         d5:13:7e:59:c9:2f:83:c2:56:cc:3d:de:5d:db:ff:12:0c:d6:
         1b:60:4a:b7:be:f7:49:6a:7b:25:e5:f1:cd:7b:57:43:c3:83:
         cf:a8:5a:86:0a:26:78:c9:cd:b4:42:52:5a:7f:a9:fc:70:3f:
         5c:61:f3:99:bd:65:8f:d9:61:45:b4:ac:23:1f:5c:4b:de:a2:
         e5:e7:bf:30:c1:7d:a4:1b:19:d0:99:ff:da:ae:d2:2c:b9:b7:
         fa:fc:48:01:06:df:53:c0:c3:da:c3:22:b0:f9:a6:04:dd:aa:
         6e:bf:ff:77:97:02:90:2f:91:ff:79:18:9f:b8:4b:19:33:8f:
         4c:0b:be:f9:a2:56:ab:2c:a6:7a:28:1b:57:7f:f2:c3:30:ed:
         7f:f2:9b:c1:ac:df:e0:23:52:67:1b:35:a7:a7:1d:6c:dc:5c:
         6e:27:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:52:41 2025 by rpki-client